ApacheHTTPS安全超文本傳輸協(xié)議配置

1、apache https安全超文本傳輸協(xié)議配置1!首兔名裝3個照務包apache服務包openssl服務包mod ssl服務包迪里用 yum 淺孑：mod ssiyum install ht t pd“ openssl -見下囹：rootlocalhostyum insteill httpd-* openss 1 -* mod_ss 1§3方便w跆嚴們就耙所有的儺檢券盞包祁朵上見下囹：dependencies reso1vedpackagearchversionrepositorysizeinsta11ing :httpd-deueli386z.z.3-zz.e15server148

2、 kopenss1-per 1i3860.9.8e-7.el5server33 kinsta11ing fordependencies:apr-develi3861.2.7-11serverz37 kapr-ut i1-d巳u巳1i3861.z.7-7.c15server54 ktransactionsummaryinsta 114package(s)update0package(s)remove0package(s)tota1 downloadsize: 47z kis this ok y/m : y_鹼入 y 布立名裝total75 mb/s i 472 kb 00:00running r

3、pm_check_debugrunning transaction testfinished transaction testtransaction test succeededrunning transactioninsta11 ing:apr-devel1/4jinsta11ing:apr-uti1-d巳u巳1z/4jinsta11ing:h譏pd-deuel3/4ins tei 11 ing:openss1-per 14/41insta1 led: httpd-deve1.i386 0：z.z.3-zz.el5 openssl-per1.i386 0:0.9.8e-7 .e15depen

4、dency insta1 led: apr-deve1.1386 0：1.2.7-11 apr-ut i1-devel.i386 0:1.2.7-7.el 5complete?rootolocalhost虛孑complete ! 走孑客裝咸功.憶e囹：下而逡左 cd / et c/ pki /1 i s/ cer t s 中i s 卷痛：兄下俗:roott? 1 oca 1 host j# cd /etc/pki/tls/certs roott? 1 oca 1 host certs j# isca-bundle.crt localhost.crt make-dummy一makef ile石老

5、竊路q鏑入金令：make server .crt 邏的注冊舌先握族你爺入倉徧：0下囹：e is 65537 (0x10001)enter pass phrase:uerifying - enter pass phrase :umask 77 ； /usr/bin/openss1 req -utf8 -new -key server.key -x509 -days 365 -out server.crt -s巳t_seria1 0enter pass phrase f or server ky：requestenter is what is ca1 led a distinguished nam

6、e or a dm. f ieids but you can leave some blankui11 be a defauit ualue, field will be left blank.you are about to be asked to 巳“ter information that mill be incorporated into your certif ica ubat you are about to there are quite a few for some fields there if you enterthe輪入 3 次京芻之后到第二步.下而聶求綸入炭：cn （中

7、） 吊傷：j s （口務） 込呂：huai an （淪名）所念單佞：wa n j i a f u （ 2家福）所念部d （更業(yè)）：b o s s （老板）儼2 （迫1磯們偵鄉(xiāng)本機i p地尬）:1 92. 1 68. 1. 1 1 1是后杲郵付込覽：nyz183country name (z lettgr code) gbj :cnstat巳 or province name (full name) berkshire:jsloca1ity name (eg, city) newbury:huaianorganization name (eg, company) my company ltd:w

8、anjiafuorganizationa1 unit name (egj section) j :booscommon marne (eg, your name or your serverj s hostname) j:19z.168.1.111 emai 1 address : nyzl83(?163 .comroott?localhost certs#內容擺立之后軟們総入命今：丨s岌呢多出3 2個殳仔：server, crt 知 server, keyrooiocqlhost certsisca-bundle.crt localhost.crt mek巳一dummy-c巳rt makef

9、 ile server.crt server.key rootlocqlhost certs# cd /rootplocalhost /tt世就圣我們需理的2 個見l ：下而衣們盯斥主紀罡殳件：vi m / et c/ ht t pd/ conf / ht t pd. conf涯盍路qg certs下而的crt 初 keysslcert if icatefile /etc/pki/t ls/cer.crt sslcert if icatekeyfile /etc/pki/t1s/certs/server.key夾們層是后一&加入世2旬請：（個人喜眄加右釆后方便杏痛）席瘙路總克爺入立能7

10、而幻科ssl . conf 殳付篩入路e： vim / et c/ ht t pd/ conf. d 血tab 従走召：總第 m ssl. conf 殳付幻科它rootylocalhost /j# uim /etc/httpd/conf.d/manua1.confproxy_ajp.conf squid.confwelcome.confper 1.confpython.confss1.confphp.confreadmeweba1izer.conf鏑入路 $： vi m i et cl ht t pd/ conf . d/ ssl .confrootolocalhost /# vim /etc

11、/httpd/conf.d/ss1.conf農第1 1 211 9污牡鐺比立付込仏：免下圖：sslcwrtificatflie /gtc/pk1/t1s/certs/localhostcrtcertif icatw, use thiskeep in mind that if key you can conf igure use of dsa ciphers, etc.)server pr iuakey :if the key is not combined with thedirective to point at the key file youj ue both a rsa and a d

12、sa privateboth in para 1le1 (to also a 1lou thesslcert if icatekeyf ile zetc/pk i/tls/pr iuatezlocalhost.keyje i ocal host .crt 知 i ocal host .key 箍咸 ser ver. cr t server .keyii119 &的tls居而private聶施改咸certs 見下®:sslcert if icatef ile c/pk i/tls/certs/setuer.crtcertif icause thiskeep in mind th

13、at if key you can conf igure use of dsa ciphers, etc.)tt server pr ivatg key:tt if thg key is not combined with the tt directo point at the key file, tt youj ve both a rsa and a dsa private tt both in para 1 le1 (to also a 1lou thesslcert if icatekeyf ile /etc/pk i/t1s/certs/seruer.key侶存退出后重右apache服

14、務:鏑入命今：service ht t pd restart第一:尢筮名耐傀僱丘失販：鉉居妙你鏑入宏錫（別才申褚的時佩鏑入的那3違的弦親）篩入2廉肓即句魚£服務：ro ot (? loca lhos t /1# service httpd res tortstopping httpd :failedstarting httpd: apache/z.2.3 mod_ss1/z.2.3 (pass phrase dialog) some of your private key f iles are encrypted for security reasons. in order to r

15、ead them you have to provide th巳 pass phrases.server localhostlocaldomain:443 (rsa)enter pass phrase:ok: pass phrase dialog successful.ok j下而坡們到丨e 詢婁器扌：鏑入：ht t ps ： il 1 92. 1 68. 1. 1 1 1跳出上q下器而：zk 找不到服務2(licrosoft intexnot explorct文件5« (v)收廉足)工具 幫肋©后退 q 兇崗p««e ieq«si sff刪:qd圖昨其曲»111“訂無法顯示網頁擁正在査找的頁當紡不可用. 您的瀏菟熬設1lis«w以下冷作車擊(?)刷新冬鈕，要檢資您的網絡連接，諳單擊: 選珮在逞接選項卡上厚擊 clmt)甘理員戒 internet査看您的15接設査j hicroioft yindvz 栓査空的f1. 單法工具菜單悠后單擊internet選環(huán).2. 在連授遶頂卡上擊lai設玄.3. 遶笄自動檢測設査總后單出定某些站臣要求128位的連獲安全性.單擊希助票至 > 燃后單擊 ¥工 v a 口一、internet£ 正在打開網貢 httpx:/192 168 1